$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af/943afc43-e72f-300d-8eaa-5d7df1773a14.roa File: 943afc43-e72f-300d-8eaa-5d7df1773a14.roa (raw, json) Hash identifier: pv/GN833BpoTR1z1VOsVtLDGepQuaCxYV2myrkCClsw= Subject key identifier: 79:B6:4C:CE:F8:75:DE:51:AE:FA:53:8A:4B:C6:AD:42:07:66:BB:49 Certificate issuer: /CN=bae37f5b-cfe2-4aed-8616-9997d3f2f0af Certificate serial: 010D0C9F43285847F7FB9CB119BFEB272134A400 Authority key identifier: EB:5F:90:B6:60:D6:08:E7:BA:F3:3C:A5:93:E0:A2:7A:43:CB:E7:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af/943afc43-e72f-300d-8eaa-5d7df1773a14.roa Signing time: Fri 22 Nov 2024 23:11:35 +0000 ROA not before: Fri 22 Nov 2024 23:11:35 +0000 ROA not after: Thu 20 Feb 2025 23:11:35 +0000 asID: 401507 IP address blocks: 23.129.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af/bae37f5b-cfe2-4aed-8616-9997d3f2f0af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af/bae37f5b-cfe2-4aed-8616-9997d3f2f0af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 29 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f7:fb:9c:b1:19:bf:eb:27:21:34:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bae37f5b-cfe2-4aed-8616-9997d3f2f0af Validity Not Before: Nov 22 23:11:35 2024 GMT Not After : Feb 20 23:11:35 2025 GMT Subject: CN=03e43d95-bee8-493a-a6ef-b7cf3825beb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:9d:a0:bd:a9:d0:02:16:ff:6e:6a:e6:a9:8a: ce:6c:ef:92:5b:2f:3b:16:1c:41:98:cc:7b:f0:f3: e7:34:65:9b:b9:28:e2:22:8a:60:d8:e9:e8:62:eb: f2:be:80:35:70:52:78:b0:7d:82:cc:54:89:b3:db: 7e:8c:ce:97:e5:a6:31:4b:4d:0d:8b:82:a3:f7:e3: b1:36:65:47:42:30:5d:39:15:d4:88:0f:93:de:2c: 88:53:e7:f7:ce:7b:fd:c7:87:62:47:c8:b7:ee:e7: 67:0b:cb:af:b4:c8:15:aa:d8:08:ce:f6:f2:ce:79: 64:b4:7b:7b:76:33:fa:0d:43:48:17:ee:4b:cc:23: 4f:13:a9:f6:b7:2b:fc:bb:7a:36:16:13:d3:25:3a: 4e:88:a6:c1:3f:b9:c3:9c:37:d4:39:23:37:43:b0: c6:88:55:ec:0c:8c:81:03:60:6b:d4:35:e1:90:99: a2:da:2b:f9:e0:9c:cd:3e:b9:cf:7c:8e:2a:40:32: f3:5d:27:b2:ac:c9:22:63:85:a9:bc:d2:2f:1f:e9: 31:7f:0d:74:48:69:40:5f:b3:37:90:60:7a:e4:e8: 1d:13:38:52:6e:62:c4:40:35:bf:b0:f2:07:66:ee: f7:bc:a2:12:60:ef:c0:21:1f:68:53:26:b7:91:24: 86:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:B6:4C:CE:F8:75:DE:51:AE:FA:53:8A:4B:C6:AD:42:07:66:BB:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af/943afc43-e72f-300d-8eaa-5d7df1773a14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af/bae37f5b-cfe2-4aed-8616-9997d3f2f0af.crl X509v3 Authority Key Identifier: keyid:EB:5F:90:B6:60:D6:08:E7:BA:F3:3C:A5:93:E0:A2:7A:43:CB:E7:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af.cer sbgp-ipAddrBlock: critical IPv4: 23.129.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:5d:14:a3:a9:a0:a9:b4:90:ab:92:0c:b8:43:26:3b:f1:e7: bf:26:74:d4:8c:18:fc:88:89:7d:07:d8:cc:9d:11:78:12:6f: 5c:8b:f4:2b:5d:f3:11:2b:fa:d3:c9:b3:7f:c8:b6:a7:cb:87: d8:1c:e5:fc:13:c3:b4:08:15:30:9b:0e:98:7b:a4:88:dd:1a: da:94:cc:43:bc:2c:ce:ac:e2:aa:f0:c9:c5:5f:86:47:cd:85: 9b:22:94:b5:20:55:18:15:2f:86:30:58:1d:39:1f:66:ee:79: ec:b3:2c:74:1f:2d:ce:15:f4:62:5d:1a:4e:d6:99:b9:8a:2c: 0f:76:00:98:90:51:e1:71:7e:36:86:10:2a:61:72:45:a3:9b: 8a:18:bd:01:63:a9:8c:a7:a8:8f:03:26:fc:96:69:15:da:1a: f9:d8:3a:10:84:a1:ec:24:a9:35:22:7b:76:6c:f0:41:e3:60: d9:10:02:09:43:56:df:bb:82:b6:b6:4e:d7:ca:79:c9:b8:02: ef:4d:e3:03:30:f3:e7:d5:22:cb:b7:13:c2:38:9f:eb:49:33: d7:0d:f6:85:c0:37:4f:8a:6e:97:39:88:c5:17:e5:96:41:c8: b1:ee:5b:d5:2c:53:44:5b:4d:a0:95:df:9c:ea:e4:4d:3e:d1: 13:b0:4b:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEf3+5yxGb/rJyE0pAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmFlMzdmNWItY2ZlMi00YWVkLTg2MTYtOTk5N2QzZjJm MGFmMB4XDTI0MTEyMjIzMTEzNVoXDTI1MDIyMDIzMTEzNVowLzEtMCsGA1UEAxMk MDNlNDNkOTUtYmVlOC00OTNhLWE2ZWYtYjdjZjM4MjViZWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZ2gvanQAhb/bmrmqYrObO+SWy87FhxBmMx7 8PPnNGWbuSjiIopg2OnoYuvyvoA1cFJ4sH2CzFSJs9t+jM6X5aYxS00Ni4Kj9+Ox NmVHQjBdORXUiA+T3iyIU+f3znv9x4diR8i37udnC8uvtMgVqtgIzvbyznlktHt7 djP6DUNIF+5LzCNPE6n2tyv8u3o2FhPTJTpOiKbBP7nDnDfUOSM3Q7DGiFXsDIyB A2Br1DXhkJmi2iv54JzNPrnPfI4qQDLzXSeyrMkiY4WpvNIvH+kxfw10SGlAX7M3 kGB65OgdEzhSbmLEQDW/sPIHZu73vKISYO/AIR9oUya3kSSGVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHm2TM74dd5RrvpTikvGrUIHZrtJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iYWUz N2Y1Yi1jZmUyLTRhZWQtODYxNi05OTk3ZDNmMmYwYWYvOTQzYWZjNDMtZTcyZi0z MDBkLThlYWEtNWQ3ZGYxNzczYTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmFlMzdmNWItY2ZlMi00YWVkLTg2 MTYtOTk5N2QzZjJmMGFmL2JhZTM3ZjViLWNmZTItNGFlZC04NjE2LTk5OTdkM2Yy ZjBhZi5jcmwwHwYDVR0jBBgwFoAU61+QtmDWCOe68zylk+CiekPL5yswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iYWUzN2Y1Yi1jZmUyLTRhZWQtODYxNi05OTk3 ZDNmMmYwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4HUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD1dFKOpoKm0kKuSDLhDJjvx578mdNSMGPyIiX0H2MydEXgSb1yL9Ctd 8xEr+tPJs3/ItqfLh9gc5fwTw7QIFTCbDph7pIjdGtqUzEO8LM6s4qrwycVfhkfN hZsilLUgVRgVL4YwWB05H2bueeyzLHQfLc4V9GJdGk7WmbmKLA92AJiQUeFxfjaG ECphckWjm4oYvQFjqYynqI8DJvyWaRXaGvnYOhCEoewkqTUie3Zs8EHjYNkQAglD Vt+7gra2TtfKecm4Au9N4wMw8+fVIsu3E8I4n+tJM9cN9oXAN0+Kbpc5iMUX5ZZB yLHuW9UsU0RbTaCV35zq5E0+0ROwS78= -----END CERTIFICATE-----Generated at Wed Nov 27 02:46:16 2024 by rpki-client on console-fra.rpki-client.org